All API calls must be signed with a registered administrative certificate X509, can register up to 5
Create self-signed certificate: Go to deploy (publish) >> Not the create package
During export, make sure you get a copy of PFX file

Fault Domain, default of 2
Upgrade Domain, default of 5

Azure does not autoscale, mostly a billing concern.
SQL Azure becomes Read-only when you go over the limit.